MCP server audit log blamed one service account for 40 change orders in three weeks
MityFourDoor · reddit · 2026-10-04
The team wired an internal MCP server into their product data system so staff could search parts, build assemblies from STEP files, and draft change orders from chat threads — cutting drafting from 10 minutes to 1.
The problem surfaced in the audit log: the connector authenticates as one service user, so every draft and edit is attributed to that account — 40 change orders in three weeks, all filed by "one person." Their quality lead asked how they'd answer that in an audit.
Fix: pass the requesting user as a field and treat the service account as transport only. But nothing enforces it — anyone calling tools directly bypasses attribution. The poster asks how others handle attribution on shared connectors. A real-world MCP enterprise governance case worth studying.
More from coding & agent
- Antigravity Rolls Out Claude Opus 5.5 and Sonnet 5.5 to All Paid Users — firstadopter · 2026-10-04
- Elden Ring × Super Mario 64 mashups go viral, built with real game code via AI coding models — mark_k · 2026-10-04
- OpenAI quietly ships MCP Events, bringing event-driven triggers to agents beyond cron — nbaschez · 2026-10-04
- Codex remote beats Claude Code and Cursor, dev says after hands-on comparison — Angaisb_ · 2026-10-04
- Mediabunny's seeking logic wins praise for fixing Chrome's broken variable-frame-rate playback — Vjeux · 2026-10-04
- PrAIvy: A P2P Network to Share Local Ollama Instances Across Users — Matty_za33 · 2026-10-04